Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
1.31.0, avatica-1.22.0
-
None
Description
Upgrade protobuf-java in Calcite and Avatica.
Some scanning tools say that the current version, 3.17.1, is affected by CVE-2021-22569. It is not, but this upgrade makes those warnings go away.
As for CALCITE-4626, we plan to upgrade both Avatica and Calcite, to keep them on the same protobuf-java version.
Attachments
Issue Links
- relates to
-
CALCITE-4626 Warning during build for JDK9+ projects due to com.google.protobuf.UnsafeUtil
- Closed
- links to